make username and email unique validation

see issue #173